General
- Target 2026-08-11_73a61618e9d5f5a6f2dfc4f8750eff3f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 8.5MB
- Sample260811-hrmwpsycjg
- SHA256 1536f262aab7378cfcd522c5a4ea0f4be70040ab1b1d2f91c5044c276c5327ed
- MD5 73a61618e9d5f5a6f2dfc4f8750eff3f
- SHA1 91d5942701b85759d51464d8fed96c3719675b95
- SHA512 0ef41c9c0dc7cf8a91ac2e38a12ab9bdb77fb9122e564f39c308e4b21c9859ded1378ceae4eeff90fc58a497e2bf5ef1d0beca1473d707eb50cecdf221da4e6d
- SSDEEP 98304:XR5WQtZ/K0tGOFWVRuLftCT50oAaldmdmnplnUm8UO:XrWyZ/K0ttYVAATeKmd0X18UO
- TLSH T1A4965A13F2A940E9E05AD178CE268231EB327C594BF1A5EF328076D52E77AD07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-11_73a61618e9d5f5a6f2dfc4f8750eff3f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-11_73a61618e9d5f5a6f2dfc4f8750eff3f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-11_73a61618e9d5f5a6f2dfc4f8750eff3f_amadey_cobalt-strike_elex_hijackloader_icedid_njrat_vidar_wannacry
- Size 8.5MB
- SHA256 1536f262aab7378cfcd522c5a4ea0f4be70040ab1b1d2f91c5044c276c5327ed
- MD5 73a61618e9d5f5a6f2dfc4f8750eff3f
- SHA1 91d5942701b85759d51464d8fed96c3719675b95
- SHA512 0ef41c9c0dc7cf8a91ac2e38a12ab9bdb77fb9122e564f39c308e4b21c9859ded1378ceae4eeff90fc58a497e2bf5ef1d0beca1473d707eb50cecdf221da4e6d
- SSDEEP 98304:XR5WQtZ/K0tGOFWVRuLftCT50oAaldmdmnplnUm8UO:XrWyZ/K0ttYVAATeKmd0X18UO
- TLSH T1A4965A13F2A940E9E05AD178CE268231EB327C594BF1A5EF328076D52E77AD07B39711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Disables service(s)
-
Executes dropped EXE
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1System Services
1Service Execution
1Persistence
Account Manipulation
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Account Manipulation
1Create or Modify System Process
1Windows Service
1